size_t bsz = 2*n + 2*ch->hashsz;
octet *b = XS_ALLOC(bsz);
octet *kb = b, *rb = kb + n, *hb = rb + ch->hashsz;
+ static const char prefix[] = "catacomb-dsa-nonce";
ghash *h;
mp_storeb(x, kb, n);
do {
for (j = 0; j < n; j += ch->hashsz) {
h = GH_INIT(ch);
+ GH_HASH(h, prefix, sizeof(prefix));
GH_HASHBUF32(h, kb, n);
GH_HASHBUF32(h, m, ch->hashsz);
if (r) GH_HASHBUF32(h, rb, ch->hashsz);